Ph3jbkfngs4g4[.]exe | Triage

Sharing

General

Target

Ph3jbkfngs4g4.exe
Size

27.5MB
MD5

8d48f2394d70eaeff9ca06701b8c2b18
SHA1

261cfb922a1386c6f62efaccbc2a8b7f001882e1
SHA256

f703dae8de26aab20688ee0de3a80ead4c09d9a68af17d533b3c75415609f8b8
SHA512

7f1491e82872c7044c39ffd9428ce244aa9e8902b53f4c12ac1d825811df7a7a858c4cc36a9104e62045bdd66a96cdd16842e6848244f6b6ede388d5312e11a2
SSDEEP

786432:asmE846itrumiPiEILhsXZJRHgwLlnaabLtBJGV6:WE84Htm6vLARg+nTbZTM6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

Ph3jbkfngs4g4.exe

Files

Ph3jbkfngs4g4.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 27.2MB - Virtual size: 27.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 255KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ